Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
File:                     NztHo87nmYKtsXA0HQICYCczICM.mft (raw, json)
Hash identifier:          CFlBWiQ+X+tIxe2AA0oHppA5VTGdSHmwqBg/zY5+Odk=
Subject key identifier:   6C:D4:A9:4C:6B:64:64:39:4C:60:DE:89:E0:10:5E:CE:6E:D0:55:81
Authority key identifier: 37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
Certificate issuer:       /CN=373b47a3cee79982adb170341d02026027332023
Certificate serial:       01962F747C315E7B29FC58CBDE6F0940EE27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:25 +0000
Files and hashes:         1: 44PWl9t-VK2hhZNHr5AmomvoGFc.roa (hash: OxQ7QHN27yQWahrAlORJzxbYRAyj5Alk9/N2TAEqxrY=)
                          2: NztHo87nmYKtsXA0HQICYCczICM.crl (hash: rbNgopyYqz7pwB3Ut8JcixfQVQ4SuEJNjgpEoqAuKC0=)
                          3: fHM2AB9lWMdrr6W98wCcBfFFZto.roa (hash: O5xk5dJ9bNLjoHECEnZnVJ7Que2qp5xFQYolbd9r+sI=)
                          4: yGyQiv41kYE21uqhtuih0OLSi9I.roa (hash: tdu5vnXKQDyjaj/70REfOS/T9RJiHmxdfg/dwymFlGk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7c:31:5e:7b:29:fc:58:cb:de:6f:09:40:ee:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=373b47a3cee79982adb170341d02026027332023
        Validity
            Not Before: Apr 13 14:01:25 2025 GMT
            Not After : Apr 14 14:01:25 2025 GMT
        Subject: CN=6cd4a94c6b6464394c60de89e0105ece6ed05581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:49:35:54:14:78:4a:88:a4:56:18:e7:d0:af:
                    12:08:9c:2e:02:5d:95:77:35:39:aa:f9:f4:1e:92:
                    3e:b7:c6:18:19:0d:c4:07:ac:aa:93:b6:0e:60:a1:
                    55:04:5a:66:18:fa:70:17:79:e9:58:66:c7:c1:e1:
                    43:71:46:2e:9e:21:ab:29:e7:75:70:3a:b9:b1:50:
                    7c:a5:ae:78:f4:02:d1:ec:ea:04:08:a9:cb:7a:00:
                    fa:ae:1d:e6:ce:87:16:33:f5:99:5e:8b:19:cf:58:
                    0c:b6:eb:17:d8:2f:57:9c:17:b2:c7:46:f3:f5:61:
                    80:fe:2f:84:88:f3:6f:00:c5:fe:71:4d:80:19:17:
                    f6:d3:af:f6:67:63:22:f0:fe:d7:e8:54:48:7c:06:
                    8e:f9:79:81:e3:fa:2c:35:06:45:0f:95:68:80:b9:
                    e1:ff:bf:2e:b3:88:f7:c4:88:0b:1c:b3:e0:df:52:
                    6c:13:f7:46:05:23:02:90:21:83:9e:c1:5c:3f:ae:
                    c6:66:f8:80:ed:97:b2:e5:64:f4:e9:b0:7e:1f:ae:
                    80:1d:61:eb:7f:af:c6:19:7a:b9:45:4d:ac:4f:9e:
                    bf:97:7f:fd:03:7a:fc:22:0a:7e:7b:9f:3f:59:68:
                    82:cd:3e:d1:0b:3c:89:cf:cd:8e:0b:02:43:1d:7b:
                    d4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D4:A9:4C:6B:64:64:39:4C:60:DE:89:E0:10:5E:CE:6E:D0:55:81
            X509v3 Authority Key Identifier:
                keyid:37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:23:8e:44:3d:ac:eb:99:a8:d4:b6:c3:2d:d2:9c:67:50:54:
         ac:85:f4:1b:d2:4e:65:31:4d:44:2b:86:dd:bf:10:31:54:76:
         aa:20:58:e5:f6:c5:4a:19:e3:fc:f2:49:08:a8:d8:88:a9:30:
         ba:f0:25:1a:8e:06:1b:49:b7:9f:f7:0f:c5:e6:e4:32:57:60:
         7f:18:75:1a:a8:f0:32:0b:94:b8:80:a2:1c:7c:88:0f:b3:c0:
         f7:a1:f2:9f:68:f9:95:71:2c:04:76:28:b3:65:69:14:ce:36:
         39:1a:38:58:57:1c:60:85:3e:38:0e:d6:29:2f:9f:76:e4:18:
         a8:85:fe:0c:8f:cb:46:40:00:e2:93:07:76:31:41:6e:1c:de:
         e5:bc:81:ae:86:17:62:f4:7b:a0:11:09:2f:5d:3e:00:c4:0a:
         fc:21:9d:64:cb:d5:92:74:60:2d:f7:54:fb:7e:dc:57:e3:94:
         9c:64:be:7e:6a:73:d3:be:09:d3:80:b5:fb:b7:83:91:6a:3a:
         e3:8f:a0:ba:7a:90:71:8f:3c:ff:e1:a4:3f:ef:24:41:85:27:
         3e:6c:46:38:38:6e:b8:88:20:05:dd:80:60:a5:5c:35:37:65:
         1f:70:13:9e:9e:69:3c:f5:54:db:22:c3:d9:48:13:f7:58:fd:
         08:51:90:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----